Extracted

• • Target
    INQUIRY.exe
  • Size 638KB
  • SHA256 2ad3891aeb09b03c1197267642a1dfbbab7ee5cfd61a426db27e3b7c7445fa35
  • MD5 193b95fd6c89fdd4af095cbc0afdbc19
  • SHA1 e38accedb4706dbdd38fb152efadf107f621cc36
  • SHA512 a05b100d0141adcc67ecd0001659f77c4882172bb67fe195ccfb46569eaa1f80124c8147aa5a5a686277aebee3dc2837207f09b7d954d864509c58f102857846
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookpersistenceratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Modifies service

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2